344 matches found
SUSE CVE-2021-46998
In the Linux kernel, the following vulnerability has been resolved: ethernet:enic: Fix a use after free bug in enichardstartxmit In enichardstartxmit, it calls enicqueuewqskb. Inside enicqueuewqskb, if some error happens, the skb will be freed by devkfreeskbskb. But the freed skb is still used in...
PT-2024-10331 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use after free bug in the enic hard start xmit function. This function calls enic queue wq skb, which may free the skb if an error occurs. However, the freed...
PT-2024-21443 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the wifi mac80211 component in the Linux kernel, specifically with the fix RCU use in TDLS fast-xmit. The problem arises because the link is looked up under RCU...
kernel: Linux kernel: Denial of Service in s390/lcs network driver due to incompatible function pointer type
A flaw was found in the Linux kernel's s390/lcs network driver. An incorrect function pointer type in the lcsstartxmit function could lead to a system crash or termination of a process. This issue arises when Kernel Control Flow Integrity kCFI, a security feature designed to prevent certain types...
kernel: erspan: do not use skb_mac_header() in ndo_start_xmit()
In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skbmacheader in ndostartxmit Drivers should not assume skbmacheaderskb == skb-data in their ndostartxmit. Use skbnetworkoffset and skbtransportoffset which better describe what is needed in erspanfbxmit and...
kernel: remote DoS in TIPC kernel module
A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization...
kernel: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
A use after free exists in the wifi module of the linux kernel in the function brcmfnetdevstartxmit,thereby leading to damage to system availability and integrity...
PT-2025-18817 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the use of skb mac header in ndo start xmit. Drivers should not assume skb mac headerskb == skb-data ...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. A security vulnerability exists in the Linux kernel, which stems from a problem with the while loop in tipclinkxmit when trying to parse a SKB that is not in a queue, and can be exploited to cause ...
SUSE CVE-2010-2495
The pppol2tpxmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecifi...
SUSE CVE-2018-1130
Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccpwritexmit function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls...
GSD-2023-1000018 tipc: call tipc_lxc_xmit without holding node_read_lock
tipc: call tipclxcxmit without holding nodereadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by commit...
PT-2023-33095 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a call to tipc lxc xmit without holding node read lock. This problem was introduced in version v5.5 and is fixed in Linux Kernel version v6.0.13. The actual impact an...
PT-2023-33282 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: The issue arises from a call to tipc lxc xmit without holding node read lock. This problem was introduced in version v5.5 and is fixed in Linux Kernel version v5.10.159. Recommendations: F...
AZL-11610 CVE-2022-3110 affecting package kernel for versions less than 5.15.86.1-1
An issue was discovered in the Linux kernel through 5.16-rc6. rtwinitxmitpriv in drivers/staging/r8188eu/core/rtwxmit.c lacks check of the return value of rtwallochwxmits and will cause the null pointer dereference...
kernel: double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c
A double-free flaw was found in the Linux kernel in the emsusbstartxmit function. This flaw allows an attacker to create a memory leak and corrupt the underlying data structure by calling free more than once...
kernel: erspan: do not assume transport header is always set
In the Linux kernel, the following vulnerability has been resolved: erspan: do not assume transport header is always set Rewrite tests in ip6erspantunnelxmit and erspanfbxmit to not assume transport header is set. syzbot reported: WARNING: CPU: 0 PID: 1350 at include/linux/skbuff.h:2911...
PT-2022-35754 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A use-after-free bug was found in the brcmf netdev start xmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...
PT-2022-35290 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A use-after-free bug was found in the brcmf netdev start xmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...
PT-2022-35496 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A use-after-free bug was found in the brcmf netdev start xmit function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...